CVE-2018-12096: Out-of-bounds Read

The liblnkdatastringgetutf8stringsize function in liblnkdatastring.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...

CVE-2018-10945: Out-of-bounds Read

The mghandlecgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash, or NULL pointer dereference via an HTTP request, related to the mbufinsert function...

CVE-2018-11725: Out-of-bounds Read

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11723: Out-of-bounds Read

The libpffnametoidmapentryread function in libpffnametoidmap.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub...

CVE-2018-11729: Out-of-bounds Read

The libfsntfsmftentryreadheader function in libfsntfsmftentry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...

PT-2018-10783

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause an information disclosure via a crafted mobi file, specifically through a heap-based buffer over-read in the mobi parse index entry function. Recommendations For Libmob...

CVE-2018-12097: Out-of-bounds Read

The liblnklocationinformationreaddata function in liblnklocationinformation.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on...

PT-2018-10201

Name of the Vulnerable Software and Affected Versions Mongoose version 6.11 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, or a NULL pointer dereference, via an HTTP request. This is related to the mbuf...

CVE-2018-12098: Out-of-bounds Read

The liblnkdatablockread function in liblnkdatablock.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...

CVE-2018-11727: Out-of-bounds Read

The libfsntfsattributereadfrommft function in libfsntfsattribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...

CVE-2018-11731: Out-of-bounds Read

The libfsntfsmftentryreadattributes function in libfsntfsmftentry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...

CVE-2018-12503

tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h...

CVE-2018-12503

tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h...

PT-2018-11222

Name of the Vulnerable Software and Affected Versions tinyexr version 0.9.5 Description The issue is related to a heap-based buffer over-read in the LoadEXRImageFromMemory function located in tinyexr.h. Recommendations For tinyexr version 0.9.5, update to a newer version that contains a fix for...

CVE-2018-12503: Out-of-bounds Read

tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h...

CVE-2018-12495

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

CVE-2018-12495

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

CVE-2018-12495

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

CVE-2018-12495

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

PT-2018-11217

Name of the Vulnerable Software and Affected Versions DISCOUNT version 2.2.3a Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, via a crafted file. This is related to the quoteblock function in markdown.c in libmarkdown.a...